Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32352d3235203d3e20323634383031.roa
File:                     3230302e39332e3232362e302f32352d3235203d3e20323634383031.roa (raw, json)
Hash identifier:          5Ljr93ykVuEoXGgYo4bhBBxFp+Q5Lq/EiYO6pfr0uro=
Subject key identifier:   53:66:ED:5C:B8:6B:C1:61:6D:49:86:79:5D:5D:CF:6B:69:17:3A:AF
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       15F0C1483619DFA6430F8FD8AF39D92F328F42DF
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32352d3235203d3e20323634383031.roa
Signing time:             Tue 05 Mar 2024 18:10:31 +0000
ROA not before:           Tue 05 Mar 2024 18:05:31 +0000
ROA not after:            Tue 04 Mar 2025 18:10:31 +0000
asID:                     264801
IP address blocks:        200.93.226.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f0:c1:48:36:19:df:a6:43:0f:8f:d8:af:39:d9:2f:32:8f:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:31 2024 GMT
            Not After : Mar  4 18:10:31 2025 GMT
        Subject: CN=5366ED5CB86BC1616D4986795D5DCF6B69173AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:6f:90:cd:c7:3c:c8:6c:1e:0e:b6:ea:5c:
                    72:27:f6:43:72:e4:19:39:d2:af:64:99:06:9b:11:
                    73:77:02:60:74:49:dd:9a:8c:0f:0d:53:8b:3a:f0:
                    5b:cb:9c:42:b4:08:e9:95:2e:03:93:93:14:a9:1d:
                    c6:0a:63:05:30:65:c7:f9:6d:0f:ca:fc:78:62:2d:
                    02:6d:b0:55:7e:6c:4f:12:22:f3:ad:ea:16:ba:2d:
                    90:31:29:f2:e3:e2:66:bb:51:68:47:48:3b:e8:94:
                    d5:a6:af:8d:35:19:f1:1b:e8:5c:20:12:0e:ee:56:
                    70:19:b3:d5:a3:1d:43:e8:f6:55:53:bc:7f:f6:68:
                    71:ae:fe:3f:8d:2f:69:b9:63:86:8c:3a:3f:db:79:
                    60:0e:fb:75:71:48:20:3a:17:37:e5:d8:25:30:9f:
                    5b:e7:47:a4:fc:9d:4b:ab:18:33:63:37:0f:3b:24:
                    af:a1:7e:70:3b:c2:d6:19:07:03:15:0d:cc:67:53:
                    84:b0:b7:e4:98:98:36:7a:41:78:de:ca:90:47:85:
                    d5:de:be:e2:a8:6c:ed:e3:84:f8:a5:63:7b:94:31:
                    c2:1f:fb:41:9c:6a:9c:38:7a:61:dd:69:37:2e:97:
                    b6:01:17:16:b2:e1:1d:d2:61:54:0c:08:97:13:df:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:ED:5C:B8:6B:C1:61:6D:49:86:79:5D:5D:CF:6B:69:17:3A:AF
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232362e302f32352d3235203d3e20323634383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.226.0/25

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:94:71:ad:b1:e7:59:26:2a:d3:d1:84:c2:f2:ee:36:f8:
         c8:da:6d:38:ec:0b:6e:ba:ef:e1:b6:73:30:7f:1b:01:59:56:
         74:57:2f:92:ff:4a:20:59:4f:37:ca:b6:5f:5c:1e:45:2b:09:
         b4:5b:95:e5:3b:08:69:7f:c5:91:a0:e1:dd:f5:5b:06:e2:81:
         d2:2a:7e:a0:04:ea:b1:73:ef:ad:fd:9b:cc:d7:10:4a:27:d0:
         5a:f1:3a:32:f3:c2:ea:3f:03:0c:64:ac:b7:40:a0:63:8c:40:
         61:eb:39:fc:fc:d0:21:fe:65:74:e3:a3:b5:44:08:d1:f7:3f:
         c9:e7:c0:c2:67:bc:4e:c6:73:32:65:a7:56:d6:f9:10:23:86:
         24:62:8d:ad:b1:92:7a:12:74:f8:72:46:f5:9b:d9:26:ce:c8:
         71:67:8b:1f:2c:d1:9a:d6:f7:c1:4a:3b:b7:f7:3d:26:c4:87:
         d0:5d:b0:2c:23:c1:b3:ec:aa:02:6e:f1:9e:2a:94:61:d5:d0:
         36:4c:2f:22:14:0c:85:f0:5d:a1:79:f9:6a:74:1a:d9:f3:15:
         7d:25:16:fc:ed:87:00:be:bf:ad:bc:eb:7c:d7:4c:40:ca:22:
         a2:18:db:85:86:9a:37:5e:5a:93:f8:97:c3:d5:00:08:97:7a:
         a3:a9:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 12:31:27 2024 by rpki-client on console-ams.rpki-client.org